[strongSwan] NO_PROPOSAL_CHOSEN error
farid21657 at yahoo.com
Tue Aug 27 03:56:11 CEST 2013
I have two machines one Ubunto 12.0 with strongSwan 188.8.131.52 and one a Openwrt router running strongswan 184.108.40.206.
I am configuring a simple host-host topology with secret key ( password). I ran >>ipsec start --nofork on ubuntu machine and >>ipsec up conn on Openwrt router .You can see below that I get error of No_PROPOSAL_CHOSEN.
I haven't set any ike and esp and I chose ikev2. Do I need to chose some specefic esp/ike for both sides? I though by default they should be able to select proper protocol.
Or there is something else missing here.
Appreciet yor help.
resasalehi at CLD-WKSRSALEH2:~/Desktop/svn/lmu5000-base$ sudo ipsec start --nofork
Starting strongSwan 4.5.2 IPsec [starter]...
00[DMN] Starting IKEv2 charon daemon (strongSwan 4.5.2)
00[KNL] listening on interfaces:
00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
00[CFG] loading crls from '/etc/ipsec.d/crls'
00[CFG] loading secrets from '/etc/ipsec.secrets'
00[CFG] loaded IKE secret for @lmu209 @lmu55
00[CFG] sql plugin: database URI not set
00[LIB] plugin 'sql': failed to load - sql_plugin_create returned NULL
00[CFG] loaded 0 RADIUS server configurations
00[LIB] plugin 'medsrv' failed to load: /usr/lib/ipsec/plugins/libstrongswan-medsrv.so: cannot open shared object file: No such file or directory
00[CFG] mediation client database URI not defined, skipped
00[LIB] plugin 'medcli': failed to load - medcli_plugin_create returned NULL
00[CFG] HA config misses local/remote address
00[LIB] plugin 'ha': failed to load - ha_plugin_create returned NULL
00[DMN] loaded plugins: test-vectors curl ldap aes des sha1 sha2 md5 random x509
revocation constraints pubkey pkcs1 pgp pem openssl fips-prf gmp agent pkcs11 xcbc hmac ctr ccm gcm attr kernel-netlink resolve socket-raw farp stroke updown eap-identity eap-aka eap-md5 eap-gtc eap-mschapv2 eap-radius eap-tls eap-ttls eap-tnc nm dhcp led addrblock
00[JOB] spawning 16 worker threads
charon (24825) started after 40 ms
04[CFG] received stroke: add connection 'desktop'
04[CFG] left nor right host is our side, assuming left=local
04[CFG] added configuration 'desktop'
12[NET] received packet: from 192.168.1.55 to 192.168.1.209
12[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]
12[IKE] no IKE config found for 192.168.1.209...192.168.1.55, sending NO_PROPOSAL_CHOSEN
12[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
12[NET] sending packet: from 192.168.1.209 to 192.168.1.55
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Users